2026-10-10 归档

今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-08 发布INFO

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values a...

CVE-2026-107729

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-08 发布INFO

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on a synchronous field resolver evaluates the result of has_...

CVE-2026-107728

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-08 发布INFO

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphql_w...

CVE-2026-107727

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscriptio

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-10-08 发布INFO

A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remot...

CVE-2026-107651

A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper s

历史摘要 · 未重新核验 · NVD

#cve #cwe-122

漏洞预警2026-10-08 发布INFO

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and r...

CVE-2026-105674

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-10-08 发布INFO

An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted p...

CVE-2026-105673

An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 55

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-08 发布INFO

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can a...

CVE-2026-105672

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher o

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-08 发布INFO

A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalis...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive ext

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.

CVE-2026-87980

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cl

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.

CVE-2026-84891

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to u

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-84875

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

CVE-2026-84247

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-84246

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a share...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition r

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL c...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-84198

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a s...

CVE-2026-84058

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PR

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-84057

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to imprope

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

CVE-2026-84035

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

CVE-2026-84032

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-295